ASA Access List Inbound

[GRANT3779]

I think I know the answer to this, but questioning it as I am implementing something which is dependent on me being correct.

If a connection is established from Inside to Outside successfully, will that traffic be allowed back into the ASA due to it being an "established" connection and Ignore any ACL I might have on the Outside Interface (Inbound)? I think yes...

[Ajay Saini · Accepted solution]

That's true. ASA being a stateful appliance, will allow reply traffic and there is no need for allowing that traffic on outside interface acl. So, acl will be bypassed for already established connection.

Only for traffic initiated from outside, we would need an acl on outside interface.

-

AJ